           (assoc-in [:jwt-claims "realm_access" "roles"]
                     ["akvo:lumen:t0"
                      "akvo:lumen:t0:admin"])
-          (assoc :tenant "t0")))
+          (assoc :tenant "t0")
+          update-auth-roles))
      200))
 
   (testing "GET admin resource as non admin with claims and tenant"


(def wrap-auth (m/wrap-jwt-authorization {:issuer "keycloak"} {:issuer "auth0"}))

#_(deftest wrap-auth-test
  (testing "GET / without claims"
    (let [response ((wrap-auth test-handler)
                    (immutant-request :get "/"))]

(ns akvo.lumen.auth-test
  (:require [akvo.lumen.auth :as m]
            [clojure.test :refer [deftest testing is]]
            [clojure.tools.logging :as log]
            [akvo.lumen.component.keycloak :as keycloak]
            [ring.mock.request :as mock]))

(defn- test-handler
